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DETAILED ACTION 

1 . This action is in response to the RCE filed 03/21/2005. Claims 1, 10, 14, 24 and 
26-27 have been amended. 

Response to Arguments 

2. Applicant's arguments with respect to claims 1 , 14, 24 and 26-27 have been 
considered but are not persuasive. Applicant's amendments have necessitated a new 
search and new grounds of rejection. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1, 4-5, 14-15, 24 and 26 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Rupp et al. ("INDEX: A Platform for Determining how People Value 
the Quality of their Internet Access") in view of Gabber et al (5,961 ,593) and Carr et al 
(5,835,915). 

Regarding claim 1, Rupp et al. disclose a method comprising: obtaining an 
identifier at a network service provider representing one or more users of a computer 
network (section 2.1 , second par); creating an anonymized identifier at the network 
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service provider, the anonymized identifier being associated witli the obtained identifier; 
collecting data being transmitted across the computer network; associating the 
anonymized identifier with the collected data if the collected data is sent to or from the 
one or more users to create a transaction record; and storing the transaction record in a 
database at the network service provider (fig. 1 ; section 2.2, third paragraph). 

Rupp discloses that an anonymized identifier is created at the network service 
provider; however, Rupp does not disclose how the anonymized identifier is created. 
Gabber discloses creating an anonymized identifier using an obtained identifier (see 
Abstract). Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to modify the Rupp method such that the anonymized 
identifier is created using the obtained identifier, as taught by Gabber, so that the same 
user will be recognized by a consistent anonymized identifier. 

Rupp discloses that the transaction record is stored in a database at the network 
service provider; however, Rupp does not disclose that the transaction record is stored 
in a database separate from the network service provider. Carr discloses that 
transaction records are stored in a database at a primary system and also in a duplicate 
database in a remote backup system separate from the primary system (col. 1 , lines 16- 
60). Therefore, it would have been obvious to one of ordinary skill in the art at the time 
the invention was made to modify the Rupp method such that the transaction record is 
stored in a database in a remote backup system separate from the network service 
provider in addition to the database at the network service provider, as taught by Carr. 
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Widespread disaster over a large geographic area that adversely affects the primary 
system will not affect the remote backup system. 

Regarding claims 4 and 5, Gabber further discloses that that the anonymized 
identifier is created by applying a one-way hashing function to the obtained identifier 
and a value, which meets the limitation of a security key (col. 9, lines 9 and 23-24). It 
would have been obvious to one of ordinary skill in the art at the time the invention was 
made to further modify the method of Rupp such that the anonymized identifier is 
created by applying a one-way hashing function to the obtained identifier and a security 
key, as taught by Gabber. Please refer to motivation recited for creating the 
anonymized identifier using the obtained identifier as taught by Gabber in claim 1 . 

Regarding claim 14, Rupp discloses a method comprising: identifying a user of a 
computer network (section 2.1, second par.); creating an anonymized identifier at a 
network service provider, said anonymized identifier being associated with a Quality of 
Service level, which meets the limitation of a classification; and storing collected 
network usage data associated with an anonymized identifier in accordance with said 
classification in a database at the network service provider (fig. 1 ; section 2.2, third 
paragraph). Rupp further discloses that the collected data is also used for billing 
purposes and, therefore, meets the limitation of network transaction data (section 2.2, 
third par.). 

Rupp does not disclose how the anonymized identifier is created. Gabber 
discloses creating an anonymized identifier representing an identified user of the 
computer network (see Abstract). Therefore, it would have been obvious to one of 
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ordinary skill in the art at the time the invention was made to modify the method of Rupp 
and Gabber to include the step of creating an anonymized representing the identified 
user of the computer network, as taught by Gabber, so that the same user will be 
recognized by a consistent anonymized identifier. 

Rupp discloses that the network transaction data is stored in a database at the 
network service provider; however, Rupp does not disclose that the network transaction 
data is stored in a database separate from the network service provider. Carr discloses 
that transaction data are stored in a database at a primary system and also in a 
duplicate database in a remote backup system separate from the primary system (col. 
1 , lines 1 6-60). Therefore, it would have been obvious to one of ordinary skill in the art 
at the time the invention was made to modify the Rupp method such that the network 
transaction data is stored in a database in a remote backup system separate from the 
network service provider in addition to the database at the network service provider, as 
taught by Carr. Widespread disaster over a large geographic area that adversely 
affects the primary system will not affect the remote backup system. 

Regarding claims 24 and 26, Rupp discloses a method comprising: obtaining an 
identifier at a network service provider representing one or more users of a computer 
network (section 2.1, second par.); creating a first anonymized identifier; creating a 
classification record by associating a Quality of Service level, which meets the limitation 
of a classification, with the first anonymized identifier; and storing the classification 
record in a database at the network service provider (fig. 1 ; section 2.2, third 
paragraph). Rupp et al. do not disclose how the anonymized identifier is created. 
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Gabber discloses the step of creating an anonymized identifier using the obtained 
identifier (see Abstract). Therefore, it would have been obvious to one of ordinary skill 
in the art at the time the invention was made to modify the method of Rupp and Gabber 
to include the step of creating a first anonymized identifier using the obtained identifier, 
as taught by Gabber, so that the same user will be recognized by a consistent first 
anonymized identifier. 

Rupp discloses that the classification record is stored in a database at the 
network service provider; however, Rupp does not disclose that the classification record 
is stored in a database separate from the network service provider. Carr discloses that 
records are stored in a database at a primary system and also in a duplicate database 
in a remote backup system separate from the primary system (col. 1, lines 16-60). 
Therefore, it would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the Rupp method such that the record is stored in a 
database in a remote backup system separate from the network service provider in 
addition to the database at the network service provider, as taught by Carr. Widespread 
disaster over a large geographic area that adversely affects the primary system will not 
affect the remote backup system. 

5. Claim 2 is rejected under 35 U.S.C. 103(a) as being unpatentable over Rupp in 
view of Gabber and Carr as applied to claim 1 above, and further in view of Astrom et 
al. (6,134,441). Rupp, Gabber and Carr do not disclose that the identifier representing 
the user is an MSISDN. Astrom discloses that an MSISDN is a unique identifier (col. 1, 
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lines 56-61 ). It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the combined method of Rupp, Gabber and Carr such 
that the obtained identifier Is a MSISDN, as taught by Gabber, because it Is a unique 
identifier representing a subscriber In GSM networks. 

6. Claims 6-9 are rejected under 35 U.S.C. 103(a) as being unpatentable over Rupp 
in view of Gabber and Carr as applied to claim 5 above, and further in view of Schneier 
("Applied Cryptography"). 

Regarding claim 6, Rupp, Gabber and Carr do not disclose that the one-way 
hashing function is the SHA. Schneier discloses that SHA is a one-way hashing 
function (section 18.7, page 442). It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to modify the combined method of Rupp, 
Gabber and Carr such that the one-way hashing function is the SHA, as taught by 
Schneier, because the algorithm is used in the Secure Hash Standard and is required 
for Federal applications not requiring a digital signature. 

Regarding claim 7, Rupp, Gabber and Carr do not disclose that the one-way 
hashing function is the MD4 algorithm. Schneier discloses that the MD4 algorithm is a 
one-way hashing function (section 18.4, page 436). It would have been obvious to one 
of ordinary skill in the art at the time the invention was made to modify the combined 
method of Rupp, Gabber and Carr such that the one-way hashing function Is the MD4 
algorithm, as taught by Schneier, for better performance and simplicity. 
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Regarding claim 8, Rupp, Gabber and Carr do not disclose that the one-way 
hashing function is the MD5 algorithm. Schneier discloses that the MD5 algorithm is a 
one-way hashing function (section 18.5, page 436). It would have been obvious to one 
of ordinary skill in the art at the time the invention was made to modify the combined 
method of Rupp, Gabber and Carr such that the one-way hashing function is the MD5 
algorithm, as taught by Schneier, because it is an improved version of MD4. 

Regarding claim 9, Rupp, Gabber and Carr do not disclose that the one-way 
hashing function is the DES algorithm. Schneier discloses that the DES algorithm can 
be used as a one-way hashing function (section 18.1 1, pages 446-447). It would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
modify the combined method of Rupp, Gabber and Carr such that the one-way hashing 
function is the DES algorithm, as taught by Schneier. The motivation for doing so would 
have been to use a symmetric block cipher algorithm as an alternative to other one-way 
hash functions. 

7. Claims 3, 10-13 and 22 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Rupp in view of Gabber and Carr as applied to claim 1 and 1 5 above, 
and further in view of Ball et al. (6,446,200). 

Regarding claim 3, Rupp, Gabber and Carr do not disclose that the obtained 
identifier is a static IP address. Ball discloses that a static IP address is a unique 
identifier (col. 14, lines 3-8). It would have been obvious to one of ordinary skill in the 
art at the time the invention was made to modify the combined method of Rupp, Gabber 
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and Carr such that the obtained identifier is a static IP address, as taught by Ball, 
because it is a unique identifier representing a network component. 

Regarding claims 10, Rupp, Gabber and Carr in claim 1 do not disclose that the 
step of obtaining an identifier representing one or more users of a computer network 
includes: receiving packets sent by an authentication server and extracting an identifier 
from the received packets. Ball discloses a method for collecting data usage network 
comprising the steps of receiving packets sent by an authentication server and 
extracting an identifier from the received packets (see fig. 1 and col. 9, line 17). It would 
have been obvious to one of ordinary skill in the art at the time the invention was made 
to modify the combined method of Rupp, Gabber and Carr to include the steps of 
receiving packets sent by an authentication server and extracting an identifier from the 
received packets, as taught by Ball, so that data of various types and formats can be 
handled (col. 3, lines 32-35). Accordingly, the receiving and extracting are performed at 
the network service provider. 

Regarding claims 11-12, they differ from claim 10 in that the authentication 
server is a RADIUS server and that the received packets are RADIUS packets. Ball 
further discloses that the authentication server is a RADIUS server and the received 
packets are RADIUS packets (see fig. 1). It would have been obvious to one of ordinary 
skill in the art at the time the invention was made to modify the method of claim 1 0 such 
that the authentication server is a RADIUS server and the received packets are 
RADIUS packets, as taught by Ball, because RADIUS is a well-accepted standard in the 
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industry and is used across a number of different types of teclinologies (col. 3, lines 48- 
51). 

Regarding claim 13, Rupp, Gabber and Carr do not disclose that the 
authentication server is a DHCP server. Ball discloses that the authentication server is 
a DHCP server (see fig. 1). It would have been obvious to one of ordinary skill in the art 
at the time the invention was made to modify the combined method of Rupp, Gabber 
and Carr such that that the authentication server is a DHCP server, as taught by Ball, so 
that data of various types and formats can be handled (col. 3, lines 32-35). 

Regarding claim 22, Rupp, Gabber and Carr in claim 14 do not disclose that the 
classification includes one from the group consisting of: wireless, satellite, dialup, DSL, 
and ISDN. Ball discloses that the classification includes wireless or ISDN (fig. 3; col. 5, 
lines 50-53, 57-63). It would have been obvious to one of ordinary skill in the art at the 
time the invention was made to modify the combined method of Rupp, Gabber and Carr 
such that that the classification includes wireless or ISDN, as taught by Ball, so that 
data collected from various sources can be differentiated for analysis. 

8. Claims 16-19 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Rupp in view of Gabber and Carr as applied to claim 14 above, and further in view of 
"Census Geography". Rupp, Gabber and Carr do not disclose that the classification is a 
geographic location, a Census block, a state or a zip code. The "Census Geography" 
reference discloses that geographic locations such as a Census block (page 2), a state 
(page 1) or a zip code (page 3) are used as classifications in methods for collecting 
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data. It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the combined method of Rupp, Gabber and Carr such 
that geographic locations such as a Census block, a state or a zip code are used as 
classification, as taught in "Census Geography", in order to protect the confidentiality of 
the collected information (see page 5). 

9. Claims 20-21 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Rupp in view of Gabber and Carr as applied to claim 14 above, and further in view of 
"National Center For Education Statistics". Rupp, Gabber and Carr do not disclose that 
the classifications used in data collection includes a telephone area code or a telephone 
exchange number. The "National Center For Education Statistics" reference discloses 
that the classification includes a telephone area code (page 1 1 ) or a telephone 
exchange number (page 6) is used in a method for collecting data. It would have been 
obvious to one of ordinary skill in the art at the time the invention was made to modify 
the combined method of Rupp, Gabber and Carr such that the classification includes a 
telephone area code or a telephone exchange number, as taught in "National Center 
For Education Statistics", in order to protect the confidentiality of the collected 
information. 

1 0. Claim 23 is rejected under 35 U.S.C. 1 03(a) as being unpatentable over Rupp in 
view of Gabber as applied to claim 14 above, and further in view of "Results of the 1998 
NASFAA Salary Survey". Rupp, Gabber and Carr do not disclose that the classification 
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is a job function code. The "Results of the 1998 NASFAA Salary Survey" reference 
discloses that a job category title, which meets the limitation of a job function code, is 
used as a classification in data collection (see table "Change in Annual Full-Time 
Salaries"). It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the combined method of Rupp, Gabber and Carr such 
that the classification is a job function code, as taught In "Results of the 1998 NASFAA 
Salary Survey", in order to classify collected data based on job functions. 

1 1 . Claim 25 is rejected under 35 U.S.C. 1 03(a) as being unpatentable over Rupp in 
view of Gabber and Carr as applied to claim 24 above, and further in view of Stallings 
("Cryptography And Network Security"). Rupp further discloses the steps of collecting 
data being transmitted across the computer network; associating the first anonymized 
identifier with the collected data if the collected data is sent to or from the one or more 
users to create a transaction record; and storing the transaction record in a database 
(section 2.2, third paragraph). However, Rupp, Gabber and Carr do not disclose 
creating a second anonymized identifier using the first anonymized identifier and 
associating the second anonymized identifier with the collected data. Stallings 
discloses hashing a hash result (section 9.4, page 295), which is equivalent to creating 
a second anonymized identifier using the first anonymized identifier. It would have been 
obvious to one of ordinary skill in the art at the time the invention was made to modify 
the combined method of Rupp, Gabber and Carr to include the step of creating a 
second anonymized identifier using the first anonymized identifier, as taught by 
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Stallings, and use it in the associating step. The motivation for doing so would have 
been to make it much more difficult to determine the user's identifier based on the 
second anonymized identifier (page 297). 

12. Claim 27 is rejected under 35 U.S.C. 103(a) as being unpatentable over Rupp in 
view of "Census Geography". Rupp discloses a method for collecting network usage 
data without associating personally identifiable information with the usage data 
comprising: identifying a user of a computer network (section 2.1, second par.); creating 
an anonymized Identifier representing the user, said anonymized identifier being 
associated with a classification; and storing collected network usage data associated 
with said anonymized identifier (section 2.2, third paragraph). Rupp further discloses 
that the collected data is also used for billing purposes and, therefore, meets the 
limitation of network transaction data (section 2.2, third par.). Rupp does not disclose 
that the classification is a geographic location, a Census block, a state or a zip code. 
The "Census Geography" reference discloses that geographic locations such as a 
Census block (page 2), a state (page 1 ) or a zip code (page 3) are used as 
classifications in methods for collecting data. It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the method of Rupp 
and Gabber such that geographic locations such as a Census block, a state or a zip 
code are used as classification, as taught in "Census Geography", in order to protect the 
confidentiality of the collected information (see page 5). 
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Conclusion 



13. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

U.S. Patent Application Publication No. 2002/0021665 to Bhagavath et al. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MInh Dinh whose telephone number Is 571-272-3802. 
The examiner can normally be reached on Mon-Fri: 10:00am-6:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned Is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications Is available through Private PAIR only. 
For more Information about the PAIR system, see http://pair-dlrect.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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